Known vulnerabilities in Microsoft SharePoint Server - page 22

Vendor: Microsoft
Software CPE: cpe:2.3:a:microsoft:microsoft_sharepoint_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 532
Public exploits: 24
Known exploited (KEV): 19
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft SharePoint Server Microsoft SharePoint Server is affected by 532 known vulnerabilities: 4 critical, 122 high, 211 medium, 195 low Critical High Medium Low

Vulnerabilities (532)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU20264 - Exposure of sensitive information to an unauthorized actor
CVE-2019-1202
CWE-200 Low
No
No
- 14.08.2019 SB2019081404
#VU20263 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-1203
CWE-79 Low
No
No
- 14.08.2019 SB2019081404
#VU20262 - Memory corruption
CVE-2019-1205
CWE-119 High
No
No
- 14.08.2019 SB2019081403
SB2019081404
#VU20261 - Stack-based buffer overflow
CVE-2019-1201
CWE-121 High
No
No
- 14.08.2019 SB2019081403
SB2019081404
#VU18935 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-1134
CWE-79 Medium
No
No
- 28.06.2019 SB2019062801
#VU18783 - Memory corruption
CVE-2019-1035
CWE-119 High
No
No
- 12.06.2019 SB2019061206
#VU18782 - Memory corruption
CVE-2019-1034
CWE-119 High
No
No
- 12.06.2019 SB2019061206
#VU18781 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-1033
CWE-79 Low
No
No
- 12.06.2019 SB2019061205
#VU18780 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-1032
CWE-79 Low
No
No
- 12.06.2019 SB2019061205
#VU18779 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-1031
CWE-79 Low
No
No
- 12.06.2019 SB2019061205
#VU18778 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-1036
CWE-79 Low
No
No
- 12.06.2019 SB2019061205
#VU18469 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-0957
CWE-79 Medium
No
No
- 15.05.2019 SB2019051504
#VU18468 - Improper Control of Generation of Code ('Code Injection')
CVE-2019-0952
CWE-94 High
No
No
- 15.05.2019 SB2019051504
#VU18466 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-0950
CWE-79 Medium
No
No
- 15.05.2019 SB2019051504
#VU18465 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-0949
CWE-79 Medium
No
No
- 15.05.2019 SB2019051504
#VU18463 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-0958
CWE-79 Medium
No
No
- 15.05.2019 SB2019051504
#VU18462 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-0956
CWE-79 Medium
No
No
- 15.05.2019 SB2019051504
#VU18202 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-0831
CWE-79 Low
No
No
- 10.04.2019 SB2019041015
#VU18201 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-0830
CWE-79 Low
No
No
- 10.04.2019 SB2019041015
#VU17952 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-0778
CWE-79 Medium
No
No
- 13.03.2019 SB2019031302


Showing elements 421 - 440 out of 532